diff options
Diffstat (limited to 'modules/private/ejabberd/ejabberd.yml')
-rw-r--r-- | modules/private/ejabberd/ejabberd.yml | 233 |
1 files changed, 233 insertions, 0 deletions
diff --git a/modules/private/ejabberd/ejabberd.yml b/modules/private/ejabberd/ejabberd.yml new file mode 100644 index 0000000..0f678b6 --- /dev/null +++ b/modules/private/ejabberd/ejabberd.yml | |||
@@ -0,0 +1,233 @@ | |||
1 | ### | ||
2 | ### ejabberd configuration file | ||
3 | ### | ||
4 | ### The parameters used in this configuration file are explained at | ||
5 | ### | ||
6 | ### https://docs.ejabberd.im/admin/configuration | ||
7 | ### | ||
8 | ### The configuration file is written in YAML. | ||
9 | ### ******************************************************* | ||
10 | ### ******* !!! WARNING !!! ******* | ||
11 | ### ******* YAML IS INDENTATION SENSITIVE ******* | ||
12 | ### ******* MAKE SURE YOU INDENT SECTIONS CORRECTLY ******* | ||
13 | ### ******************************************************* | ||
14 | ### Refer to http://en.wikipedia.org/wiki/YAML for the brief description. | ||
15 | ### However, ejabberd treats different literals as different types: | ||
16 | ### | ||
17 | ### - unquoted or single-quoted strings. They are called "atoms". | ||
18 | ### Example: dog, 'Jupiter', '3.14159', YELLOW | ||
19 | ### | ||
20 | ### - numeric literals. Example: 3, -45.0, .0 | ||
21 | ### | ||
22 | ### - quoted or folded strings. | ||
23 | ### Examples of quoted string: "Lizzard", "orange". | ||
24 | ### Example of folded string: | ||
25 | ### > Art thou not Romeo, | ||
26 | ### and a Montague? | ||
27 | ### | ||
28 | |||
29 | hosts: | ||
30 | - "immae.fr" | ||
31 | |||
32 | loglevel: 4 | ||
33 | log_rotate_size: 10485760 | ||
34 | log_rotate_date: "" | ||
35 | log_rotate_count: 1 | ||
36 | log_rate_limit: 100 | ||
37 | |||
38 | certfiles: | ||
39 | - "@certificatePrivateKeyAndFullChain@" | ||
40 | |||
41 | listen: | ||
42 | - | ||
43 | port: 5222 | ||
44 | ip: "::" | ||
45 | module: ejabberd_c2s | ||
46 | max_stanza_size: 262144 | ||
47 | shaper: c2s_shaper | ||
48 | access: c2s | ||
49 | starttls_required: true | ||
50 | - | ||
51 | port: 5269 | ||
52 | ip: "::" | ||
53 | module: ejabberd_s2s_in | ||
54 | max_stanza_size: 524288 | ||
55 | - | ||
56 | port: 5280 | ||
57 | ip: "127.0.0.1" | ||
58 | module: ejabberd_http | ||
59 | request_handlers: | ||
60 | "/admin": ejabberd_web_admin | ||
61 | "/api": mod_http_api | ||
62 | "/bosh": mod_bosh | ||
63 | "/captcha": ejabberd_captcha | ||
64 | "/upload": mod_http_upload | ||
65 | "/ws": ejabberd_http_ws | ||
66 | tls: false | ||
67 | |||
68 | s2s_use_starttls: optional | ||
69 | s2s_cafile: "@certificateCA@" | ||
70 | |||
71 | default_db: sql | ||
72 | sql_type: pgsql | ||
73 | include_config_file: @sql_config_file@ | ||
74 | include_config_file: @host_config_file@ | ||
75 | new_sql_schema: true | ||
76 | |||
77 | acl: | ||
78 | admin: | ||
79 | - user: "ismael@immae.fr" | ||
80 | local: | ||
81 | user_regexp: "" | ||
82 | loopback: | ||
83 | ip: | ||
84 | - "127.0.0.0/8" | ||
85 | - "::1/128" | ||
86 | - "::FFFF:127.0.0.1/128" | ||
87 | |||
88 | access_rules: | ||
89 | local: | ||
90 | - allow: local | ||
91 | c2s: | ||
92 | - deny: blocked | ||
93 | - allow | ||
94 | announce: | ||
95 | - allow: admin | ||
96 | configure: | ||
97 | - allow: admin | ||
98 | muc_admin: | ||
99 | - allow: admin | ||
100 | muc_create: | ||
101 | - allow: local | ||
102 | muc: | ||
103 | - allow | ||
104 | pubsub_createnode: | ||
105 | - allow: local | ||
106 | register: | ||
107 | - deny | ||
108 | trusted_network: | ||
109 | - allow: loopback | ||
110 | |||
111 | api_permissions: | ||
112 | "console commands": | ||
113 | from: | ||
114 | - ejabberd_ctl | ||
115 | who: all | ||
116 | what: "*" | ||
117 | "admin access": | ||
118 | who: | ||
119 | - acl: admin | ||
120 | - oauth: | ||
121 | - scope: "ejabberd:admin" | ||
122 | - acl: admin | ||
123 | what: | ||
124 | - "*" | ||
125 | - "!stop" | ||
126 | - "!start" | ||
127 | "public commands": | ||
128 | who: | ||
129 | - ip: | ||
130 | - "0.0.0.0" | ||
131 | - "::" | ||
132 | what: | ||
133 | - "status" | ||
134 | - "connected_users_number" | ||
135 | |||
136 | shaper: | ||
137 | normal: 1000 | ||
138 | fast: 50000 | ||
139 | |||
140 | shaper_rules: | ||
141 | max_user_sessions: 10 | ||
142 | max_user_offline_messages: | ||
143 | - 5000: admin | ||
144 | - 100 | ||
145 | c2s_shaper: | ||
146 | - none: admin | ||
147 | - normal | ||
148 | s2s_shaper: fast | ||
149 | |||
150 | modules: | ||
151 | mod_adhoc: {} | ||
152 | mod_admin_extra: {} | ||
153 | mod_announce: | ||
154 | access: announce | ||
155 | mod_avatar: {} | ||
156 | mod_blocking: {} | ||
157 | mod_bosh: {} | ||
158 | mod_caps: {} | ||
159 | mod_carboncopy: {} | ||
160 | mod_client_state: {} | ||
161 | mod_configure: {} | ||
162 | mod_disco: {} | ||
163 | mod_fail2ban: {} | ||
164 | mod_http_api: {} | ||
165 | mod_http_upload: | ||
166 | put_url: "https://im.immae.fr/upload" | ||
167 | custom_headers: | ||
168 | "Access-Control-Allow-Origin": "*" | ||
169 | "Access-Control-Allow-Methods": "OPTIONS, HEAD, GET, PUT, POST" | ||
170 | "Access-Control-Allow-Headers": "Content-Type" | ||
171 | mod_last: {} | ||
172 | mod_mam: | ||
173 | default: always | ||
174 | mod_muc: | ||
175 | access: | ||
176 | - allow | ||
177 | access_admin: | ||
178 | - allow: admin | ||
179 | access_create: muc_create | ||
180 | access_persistent: muc_create | ||
181 | default_room_options: | ||
182 | mam: true | ||
183 | mod_muc_admin: {} | ||
184 | mod_offline: | ||
185 | access_max_user_messages: max_user_offline_messages | ||
186 | mod_ping: {} | ||
187 | mod_privacy: {} | ||
188 | mod_private: {} | ||
189 | mod_proxy65: | ||
190 | access: local | ||
191 | max_connections: 5 | ||
192 | mod_pubsub: | ||
193 | access_createnode: pubsub_createnode | ||
194 | plugins: | ||
195 | - "flat" | ||
196 | - "hometree" | ||
197 | - "pep" | ||
198 | force_node_config: | ||
199 | ## Change from "whitelist" to "open" to enable OMEMO support | ||
200 | ## See https://github.com/processone/ejabberd/issues/2425 | ||
201 | "eu.siacs.conversations.axolotl.*": | ||
202 | access_model: open | ||
203 | ## Avoid buggy clients to make their bookmarks public | ||
204 | "storage:bookmarks": | ||
205 | access_model: whitelist | ||
206 | mod_push: {} | ||
207 | mod_push_keepalive: {} | ||
208 | mod_register: | ||
209 | ## Only accept registration requests from the "trusted" | ||
210 | ## network (see access_rules section above). | ||
211 | ## Think twice before enabling registration from any | ||
212 | ## address. See the Jabber SPAM Manifesto for details: | ||
213 | ## https://github.com/ge0rg/jabber-spam-fighting-manifesto | ||
214 | ip_access: trusted_network | ||
215 | access: register | ||
216 | mod_roster: | ||
217 | versioning: true | ||
218 | mod_s2s_dialback: {} | ||
219 | mod_shared_roster: {} | ||
220 | mod_stats: {} | ||
221 | mod_stream_mgmt: | ||
222 | resend_on_timeout: if_offline | ||
223 | mod_time: {} | ||
224 | mod_vcard: {} | ||
225 | mod_vcard_xupdate: {} | ||
226 | mod_version: | ||
227 | show_os: false | ||
228 | |||
229 | ### Local Variables: | ||
230 | ### mode: yaml | ||
231 | ### End: | ||
232 | ### vim: set filetype=yaml tabstop=8 | ||
233 | |||